CVPR 2020 Workshop on

Adversarial Machine Learning in Computer Vision

Seattle, Washington
June 19, 2020


Although computer vision models have achieved advanced performance on various recognition tasks in recent years, they are known to be vulnerable against adversarial examples. The existence of adversarial examples reveals that current computer vision models perform differently with the human vision system, and on the other hand provides opportunities for understanding and improving these models.

In this workshop, we will focus on recent research and future directions on adversarial machine learning in computer vision. We aim to bring experts from the computer vision, machine learning and security communities together to highlight the recent progress in this area, as well as discuss the benefits of integrating recent progress in adversarial machine learning into general computer vision tasks. Specifically, we seek to study adversarial machine learning not only for enhancing the model robustness against adversarial attacks, but also as a guide to diagnose/explain the limitation of current computer vision models as well as potential improving strategies. We hope this workshop can shed light on bridging the gap between the human vision system and computer vision systems, and chart out cross-community collaborations, including computer vision, machine learning and security communities.

Call For Papers

We recently received many inquiries about the ddl extension for the paper submission, due to the inconvenience brought by the breakout of COVID-19. We understand this hard situation for all researchers, and decide to allow 1 more week for the paper submission. This deadline is firm and will not be extended futher. If you need any other accommodations, please let us know and we will try our best to help.

Submission deadline: March 15 (NEW: March 22), 2020 Anywhere on Earth (AoE)

Notification sent to authors: April 10, 2020 Anywhere on Earth (AoE)

Camera ready deadline: April 17, 2020 Anywhere on Earth (AoE)

Submission server:

Submission format: Submissions need to be anonymized, and follow the CVPR 2020 Submission Guidelines. The workshop considers two types of submissions: (1) Long Paper: the page limitation is eight excluding references, and will be included in the official CVPR proceedings; (2) Extended Abstract: the page limitation is four excluding references, and will NOT be included in the official CVPR proceedings. Based on the PC’s recommendation, the accepted long paper/extended abstract will be allocated either a contributed talk or a poster presentation.

We invite submissions on any aspect of adversarial machine learning in computer vision. This includes, but is not limited to:

We are excited to announce a DeepMind Best Paper Award and travel grants. The workshop is fully sponsored by DeepMind through the University of Oxford.




Organizing Committee

Program Committee

  • Maksym Andriushchenko (EPFL)
  • Anurag Arnab (Google)
  • Arjun Nitin Bhagoji (Princeton University)
  • Wieland Brendel (University of Tübingen)
  • Yulong Cao (University of Michigan)
  • Hongge Chen (MIT)
  • Ambra Demontis (University of Cagliari)
  • Yinpeng Dong (Tsinghua University)
  • Sven Gowal (DeepMind)
  • Chuan Guo (Cornell University)
  • Saumya Jetley (INRIA)
  • Adam Kortylewski (Johns Hopkins University)
  • Alexey Kurakin (Google Brain)
  • Yingwei Li (Johns Hopkins University)
  • Jingyue Lu (University of Oxford)
  • Jan Hendrik Metzen (Bosch Center for Artificial Intelligence)
  • Mahyar Najibi (University of Maryland, College Park)
  • Tianyu Pang (Tsinghua University)
  • Maura Pintor (University of Cagliari)
  • Hamed Pirsiavash (UMBC)
  • Omid Poursaeed (Cornell University)
  • Aaditya Prakash (PathAI)
  • Chongli Qin (DeepMind)
  • Jonas Rauber (University of Tübingen)
  • Aniruddha Saha (UMBC)
  • Ali Shafahi (University of Maryland, College Park)
  • Yash Sharma (University of Tübingen)
  • Akshayvarun Subramanya (UMBC)
  • Krishna Kumar Singh (UC Davis)
  • David Stutz (Max Planck Institute for Informatics)
  • Peng Tang (Salesforce Research)
  • Jianyu Wang (Waymo)
  • Yuxin Wu (Facebook AI Research)
  • Chang Xiao (Columbia University)
  • Chaowei Xiao (University of Michigan)
  • Hongyang Zhang (Toyota Technological Institute at Chicago)
  • Huan Zhang (UCLA)
  • Dan Xu (University of Oxford)


Please contact Cihang Xie or Xinyun Chen if you have questions. The webpage template is by the courtesy of ICCV 2019 Tutorial on Interpretable Machine Learning for Computer Vision. Thank Yingwei Li for making this website.